获取本地计算机上安装的所有证书

Question

我有以下代码来获取证书：

X509Store store = new X509Store("??","??");
            List<X509Certificate2> lst = new List<X509Certificate2>();
            store.Open(OpenFlags.ReadOnly);

            foreach (X509Certificate2 mCert in store.Certificates)
            {

                lst.Add(mCert);
                //TODO's
            }

现在我想获取安装在 Local Machine 中的所有证书 带有证书名称、位置、使用公钥颁发的列表 或私钥（仅限是或否）和文件夹的名称 包含这些证书（请参阅下面的快照）：

使用证书详细信息填充 List 后，我想以网格格式显示这些数据。如何修改此代码以获取上述详细信息？

Answer 1

您机器上的证书存储在不同的商店中，因此您需要打开所有证书。请看MSDN 文章。

代码示例：

public class CertDetails
{
    public string Name { get; set; }
    public string HasPrivateKey { get; set; }
    public string Location { get; set; }
    public string Issuer { get; set; }
}

// stores and they friendly names
var stores = new Dictionary<StoreName, string>()
{
    {StoreName.My, "Personal"},
    {StoreName.Root, "Trusted roots"},
    {StoreName.TrustedPublisher, "Trusted publishers"}
    // and so on
    }.Select(s => new {store = new X509Store(s.Key, StoreLocation.LocalMachine), location = s.Value}).ToArray();

foreach (var store in stores)
    store.store.Open(OpenFlags.ReadOnly); // open each store

var list = stores.SelectMany(s => s.store.Certificates.Cast<X509Certificate2>()
    .Select(mCert => new CertDetails
    {
        HasPrivateKey = mCert.HasPrivateKey ? "Yes" : "No",
        Name = mCert.FriendlyName,
        Location = s.location,
        Issuer = mCert.Issuer
    })).ToList();

Answer 2

一个简短的例子来激发你的灵感，也许它会有所帮助：

using System.Security.Cryptography.X509Certificates;
using System.Security.Cryptography;
...
X509Store store = null;
store = new X509Store(StoreName.My, StoreLocation.LocalMachine);
store.Open(OpenFlags.OpenExistingOnly | OpenFlags.ReadOnly)
...

//RSA CryptoServiceProvider
RSACryptoServiceProvider rsaCSP = null;

string keyPath = Environment.GetFolderPath(Environment.SpecialFolder.CommonApplicationData) + @"\Microsoft\Crypto\RSA\MachineKeys\";

string friendlyName = "";

foreach (X509Certificate2 mCert in store.Certificates) {

  rsaCSP = mCert.PrivateKey as RSACryptoServiceProvider;

  if (rsaCSP != null) {
    friendlyName = mCert.FriendlyName;                    
    keyPath += rsaCSP.CspKeyContainerInfo.UniqueKeyContainerName;
  }                        
}